CVE-2026-111153

Deferred Deferred - Pending Action

Global Out-of-Bounds Read in Game Music Emu

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, opened through gme_open_data or gme_open_file, to read past the static array during loading and cause denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-16

EPSS Evaluated

2026-10-18

NVD

CVE-2026-111153

EUVD

EUVD-2026-102280

Affected Vendors & Products

Vendor	Product	Version / Range
libgme	game-music-emu	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is a global out-of-bounds read vulnerability in Game Music Emu (libgme) through version 0.6.5. It occurs in the Classic_Emu::mute_voices_ function when processing NSF files with a voice count exceeding the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags set to 0x3F to trigger an out-of-bounds read during file loading, causing application crashes and denial of service.

Detection Guidance

Detect this vulnerability by scanning for applications using libgme versions 0.6.5 or older. Check for crashes when processing NSF files with chip_flags set to 0x3F. Use tools like AddressSanitizer during fuzzing to identify out-of-bounds reads in Classic_Emu::mute_voices_.

Impact Analysis

This vulnerability allows attackers to crash applications that use libgme by supplying specially crafted NSF files. This can lead to denial of service, disrupting services that rely on the library for audio processing. Users may experience application failures when opening malicious NSF files.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is a denial-of-service issue in a media library. However, if an application using libgme processes untrusted NSF files in a regulated environment, denial-of-service could impact availability of services, which may indirectly affect compliance with availability requirements in standards like HIPAA.

Mitigation Strategies

Update libgme to the latest version beyond 0.6.5. If updating is not possible, restrict access to applications using libgme or filter NSF files to block those with chip_flags set to 0x3F. Monitor for crashes in applications processing NSF files.

Hi! I’m here to help you understand CVE-2026-111153. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70